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INTERNET FORWARDING METHOD, RELATED SYSTEM AND RELATED 

DEVICES 

Tfte present invention relates to an internet forwarding method as 
described in the preamble of claim 1, and the related system as described in the 
preamble of claim 5. 

Such a internet forwarding method is already known in the art, e.g. 
from section 5, p.l 6 of Internet draft "IP Network Address Translation (NAT) 
Terminology and Considerations " from the authors P. Srisuresh and M. 
10 Holdrege. This IETF internet-draft is published in April 1999 at the IETF internet- 
site under the title "draft-ietf-nat-terminology-02.txt". Therein, an internet 
forwarding system is described wherein a host in a private network needs internet 
connectivity because a host on the internet needs to contact the private host or 
the private host needs to contact an internet host. 
15 The context of the description is related to the internet access of a privately 

addressed network. In such a privately addressed network all hosts are, at boot 
time, assigned a private IP address to enable TCP communications inside the 
network. However, in order to offer Internet connectivity to a private host, a"" 
global IP address from a pool of IP-addresses, is assigned to this private host, 
20 when this internet connectivity is required. 

Then the internal routing, within the privately addressed network, has 
to be managed in order to allow the establishment of a path through the 
privately addressed network to the private host with a globally assigned and 
legally registered IP-address. This in order to enable the communication between 
25 the privately addressed host and a host connected to the internet. 

To enable the communication a tunnel is established, connecting the edge router 
of the private network with the addressed private host. 

The establishment of a tunnel between the edge router of the private network and 
the addressed private host has the following disadvantages: the edge router is 
30 heavy loaded and needs to keep state information, which creates a single point 
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of failure, subsequently resulting in a limited robustness of the tunnelling. No 
load balancing of the outgoing traffic is possible in case of use of tunnelling and 
additional header-overhead occurs because of encapsulation. 

An object of the present invention is to provide an internet forwarding 
method of the above known type but wherein the transfer of packets from an 
edge router of the private network to the addressed private host is more efficient, 
the edge router load is decreased and the robustness is increased. 

According to the invention, this object is achieved by the method as 
describecflin claim 1 and the related system as described in claim 5. ^/ 
Indeed, bwforwarding packets from an edge router of the private network to the 
globally ad&lressed private host only based on the global internet address, and 
vice versa it \ avoided that the internet packets have to be encapsulated, in this 
way reducingVhe overhead. Because it is possible to dynamically change the path 
along which the packets are routed, the single point of failure is avoided and in 
15 this way, the robustness has improved. This way of handling also solves the load- 
balancing problem of the prior art situation. 

Another characteristic feature of the present invention concerns the 
implementation of The method using the Open shortest Path protocol as 
described in claim 2\ the system as described in claim 6 and the related device as / 
20 described in claim 9. ^ 
At the assignment of a global internet address to a private host, a router 
daemon is activated at this private host in order to facilitate this host to be 
contacted from the internet, or vice versa. The router daemon active at the private 
host will notify the entire private network about its presence using the Open 
25 Shortest Path First protocol, further referred to as OSPF. All routers of the private 
network add the assigned global internet address as an entry to their routing 
table. At the time all routers^of the private network are updated and a packet with 
the global internet address arrives at the edge router (ER) of the private network, 
the packet is routed hop-by-hop towards the private host using the information 
30 provided by each of the routing tables. Because it is possible to dynamically 
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change the path along which the packets are routed, by updating the routing- 
table of each of the routers, the single point of failure is avoided and in this way 
the robustness has improved. This way of handling also solves the load- 
balancing problem of the prior art situation. 

\ further characteristic feature of the present invention concern the 
implementation of the method using the Resource Reservation Protocol, further 
referred to RS^/P, as described in claim 3, the system as described in claim 7 and 
the related device as described in claims 10, 1 1 and 12. 

At the assignment of a global internet address to a private host, all routers 
on the shortest path towards the edge router of the private network and the edge 
router are notified about the assignment of the global IP-address of the 
destination host. All routers on the shortest path between the destination host 
and the edge router add the assigned global internet address as an entry to their 
routing table. At the time all routers of the private network are updated and a 
packet with the global internet address arrives at the edge router of the private 
network the packet is routed towards the private host along this shortest path 
based on the global IP-address within the data packet and the information of the 
respective routing tables. Because it is possible to dynamically change the path 
along which the packets are routed, by updating the routing-table of each router 
on the shortest path, the single point of failure is avoided and in this way, the 
robustness has improved. This way of handling also solves the load-balancing 
problem of the prior art situation. 

Araother characteristic feature of the present invention concerns the 
implementation of the method using a multicasting protocol as described in 
claim 4, the sys\em as described in claim 8 and the related devices as described 
in claims 13, 14\and 15. 

At the assignment of a global internet address to a private host, the 
private host will subscribe to a multicasting-group whereof the edge router is the 
root or the subscriber administration, by sending a join-message towards the 
edge router along all routers on the shortest path towards this edge router. All 



routers on the shortest path will update their multicast group information in this 
way establishing link by link the multicast-tree consisting of one single branch 
between the edge router and the destination host. Because it is possible to 
dynamically change the path along which the packets are routed, the single point 
5 of failure is avoided and in this way, the robustness has improved. This way of 
handling also solves the load-balancing problem of the prior art situation. 

The above and other objects and features of the invention will become 
more apparent and the invention itself will be best understood by referring to the 
following description of three embodiments taken in conjunction with the 

1 0 accompanying drawings wherein: 

FIG. 1 represents private network coupled to the internet, FIG. 2 ^gflfo 
represent5destination host DH of FIG 1 supporting the OSPF-protocol. FIQi 3A, 
3B and 3C in their turn represent^ destination host DH, router Rl and edge 
router ER of FIG. 1 supporting the RSVP protocol and FIG.4A, 4B and 4C 

15 represent destination host DH, router Rl and edge router ER of FIG. 1 supporting 
the Internet Management Group Protocol. 

In the following paragraphs, referring to the drawings, an 
implementation of the method according to the present invention will be 
described. In the first part of this description the main elements of the network 

20 environment, as presented in FIG. 1 , wherein the forwarding method of the 
present invention is performed, is described. This part is succeeded by a 
description of all interconnections between each of the before mentioned network 
elements. In the second part the network elements are further specified for three 
possible embodiments of the present invention. At first, there is for each 

25 embodiment the main means of each network element described. Secondly, all 
interconnections between this before mentioned means are described. 
Subsequently the actual execution of the forwarding method is described. 
Subsequently, in the following paragraphs, there are two other embodiments of 
this forwarding method described in the same way. 
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The essential elements of the network environment of the present 
invention are a private network and the internet. The private network PNW 
consists of a destination host DH, a computer terminal which is able to send 
and/or to receive data-packets. This destination host DH is only reachable from 
5 within the private network PNW. Then there are a number of routers Rl - R6, 
taking care of the forwarding of privately addressed data-packets through the 
private network PNW. Besides these there is an edge router ER which is a router 
constituting the edge between the private network PNW and the internet INW. 
This edge router is able to receive data-packets from the private network PNW 

10 and forward them to the internet network INW, or vice versa. The internet INW 
comprises a contacting host CH that is also a computer terminal that is able to 
send and/or to receive data-packets. This is a terminal with a global Internet 
Protocol address, further referred to as IP address, already assigned. 

Destination host DH is coupled to the first router Rl that in its turn is 

15 coupled to router R2 and router R3. Router R2 further is coupled to router R4 and 
Router R5. Router R3 further is coupled to router R5 and router R6, which both 
are coupled to edge router ER. Router R4 is also coupled to edge router ER. The 
edge router ER couples the private network PNW to the internet INW. At last the 
contacting host CH is coupled to the internet INW. All mentioned connections are 

20 supposed to be IP-links. 

An important network element is the destination host DH which is a 
computer terminal having access to the private network PNW only. This 
destination host DH, as shown in FIG. 2 consists of an internet packet sending 
and reception means PSRM which is adapted to either send or receive internet 

25 packets, a routing daemon means DRM which is adapted to notify all adjacent 
routers of the destination host DH about the presence of this destination host DH 
using the Open Shortest Path First protocol flooding. 

Further, the destination host DH comprises an assignment detection 
means ADM, which detects if the routing daemon means DRM is activated. Then 

30 there is a router daemon waking means RDWM, which takes care of 




- 6 - 

activating the router daemon means DRM at assignment of the global 
internet address. 

The assignment detection means ADM is coupled to the router 
daemon wake up means RDWM on its turn coupled to the daemon routing 
5 means DRM. The daemon routing means has an output-terminal that is at the 
same time an input/output-terminal I/O of the destination host DH. The packet 
sending and reception means PSRM has an input/output-terminal that is also at 
the same time the input/output-terminal I/O of the destination host DH. 

In order to explain the operation of the present invention it is assumed 

1 0 that a contacting host CH connected to the internet INW tries to contact the 

destination host DH. It is also assumed that this contacting host CH already has 
gained internet connectivity. Further it is assumed that there is a mechanism 
within the private network PNW, which is well known by any person skilled in the 
art, for assigning a global IP address to the destination host DH, from a pool of 

15 global IP-addresses allocated to the private internet network PNW. 

At the time the assignment detection means ADM detects that the 
global IP address has been assigned to the destination host, the routing daemon 
wake up means RDWM takes care of activating a router daemon, which was in a 
sleeping state at the computer terminal of the destination host DH. The routing 

20 daemon means DRM then floods an OSPF-message towards the adjacent router 
Rl of the destination host. Router Rl subsequently updates its routing-table and 
adds a new entry with the new assigned global IP address together with the link 
from which the OSPF message came from. Router Rl will subsequently forward 
the message to the adjacent routers R2 and R3 which also update their routing- 

25 tables and in its turn forward the OSPF-message in direction of the edge router 
ER till all routers R1-R6 of the private network PNW are updated, meaning that 
an entry in the routing-table has been added. If an internet data-packet destined 
to the destination host DH arrives at the edge router ER, the packet can be 
forwarded hop-by-hop, to the destination host DH using the updated routing 

30 tables of the routers on its path. The edge router ER checks on the destination- 
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address of the packet and finds out, checking the routing table, that the packet 
can be sent to router R5 which in its turn, in the same way as the edge-router ER 
sends the packet towards router R2. Router R2 then forwards the data-packet 
based on the global IP address towards router Rl which forwards the packet to 
5 the destination host DH. Destination host DH checks on the IP-address of the 
internet packet and finds that the destination of the packet is itself. 

The second embodiment making use of the Resource Reservation 
Protocol, further referred to as RSVP, running within the same network 
environment as before described and presented in FIG.l, is described in the 

10 following paragraphs. At first, the relevant elements of destination host DH, 

router Rl and edge router ER from FIG. 1 as presented in FIC^ 3A, 3B and 3C 
are described. Subsequently the connections between the relevant elements are 
described and in a later paragraph the actual execution of this embodiment of 
the present invention is described. 

15 The relevant elements of the destination host DH as presented in FIG. 

3A are the assignment detection means ADM1 which is adapted to detect if 
a global IP-address has been assigned and if the destination host DH has 
been configured for internet connectivity, the adjacent router notification 
means ARNM, which is prepared to send a Resource Reservation Protocol 

20 message containing the global IP-address of destination host DH to the 
adjacent router Rl of the destination host DH along a shortest path in 
direction of the edge router ER in order to update the adjacent router's 
routing-table. Further there is a packet sending and reception means PSRM1, 
which is adapted to either send internet packets or receive internet packets. 

25 The assignment detection means ADM1 is coupled to the adjacent 

router notification means ARNM having an output-terminal being at the same 
time an Input/output l/Ol terminal of destination host DH. The packet sending 
and reception means has an Input/output-terminal that is coupled to 
Input/output-terminal l/Ol of destination host DH. 
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The relevant means of the router Rl , as presented in FIG. 3B, are the 
message reception means MRM which is adapted to receive a Resource 
Reservation Protocol message, a message interpretation means MIM which is 
adapted to interpret a received Resource Reservation Protocol message 
5 containing the global IP-address of destination host DH. Further there is a 
routing-table updating means RUM, which is adapted to update a routing- 
table with the assigned global IP-address of destination host DH and at last, 
router Rl comprises a message forwarding means MFM which is able to 
forward a Resource Reservation Protocol message containing the global IP- 
10 address of the destination host DH towards an adjacent router or edge 

router ER on a shortest path between the destination host DH and the edge 
router ER. 

The message reception means MRM comprises an input-terminal 
which is at the same time an input-terminal I of router Rl . Further the message 

15 reception means MRM is coupled to the message interpretation means MIM 
which in its turn is coupled to the routing-table updating means RUM. The 
routing-table updating means RUM is coupled to message forwarding means 
MFM. The message forwarding means MFM comprises an output-terminal that is 
also an output-terminal O of router Rl . 

20 Routers R2 - R6 of FIG. 1 have in this embodiment the same 

structure as router Rl, as described before. 

Another relevant element of this embodiment is the edge router ER of 
FIG 1 . The relevant means of the edge router ER as presented in FIG. 3, are the 
message reception means MRM1 which is adapted to receive a Resource 

25 Reservation Protocol message containing the global IP-address of 

destination host DH, a message interpretation means MIM1 which is adapted to 
interpret a received Resource Reservation Protocol message that contains the 
global IP-address of destination host DH and a routing-table updating 
means RUM1, which is adapted to update a routing-table with the assigned 

30 global IP-address of destination host DH. 
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The message reception means MRM1 comprises an input-terminal 
that is at the same time an input-terminal II of edge router ER. Further the 
message reception means MRM1 is coupled to the message interpretation means 
MIM1 which in its turn is coupled to the routing-table updating means RUM1 . 
5 In order to explain the operation of the present invention it is again 

assumed that a contacting host CH connected to the internet INW tries to contact 
the destination host DH. It is also assumed that this contacting host CH already 
has gained internet connectivity. Further it is assumed that there is a mechanism 
within the private network PNW, which is well known by any person skilled in the 

10 art, for assigning a global IP address to the destination host DH, from a pool of 
global IP-addresses allocated to the private internet network PNW. 

At the time the assignment detection means ADM1 detects that the 
global IP address has been assigned to the destination host DH, this assignment 
detection means ADM1 takes care of activating the adjacent router notification 

15 means ANRM. This means sends a RSVP message containing the assigned global 
IP-address of destination host DH to its adjacent router on the shortest path 
towards edge router ER, router Rl . It is also assumed that the shortest path 
between Destination host DH and edge router ER for the in this embodiment 
described network configuration leads via Routers Rl, R2 and R5. The message 

20 reception means MRM of Router Rl receives the RSVP-message together with the 
assigned global IP-address which was incorporated in the RSVP message. The 
message interpretation means MIM of router Rl interprets the global IP-address 
by linking the global IP-address of the destination host DH with the interface of 
router Rl where the message came from and the routing-table updating means 

25 RUM of Router Rl subsequently updates its routing-table by adding a new entry 
containing the global IP-address and the interface of router Rl where the RSVP 
message came from. Message forwarding means MFM of Router Rl then 
forwards an RSVP-message requesting router R2 in the same way as before 
described, to update its routing-table with a new entry containing the global IP- 

30 address of the destination host and the interface of router R2 where the message 
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came from. Router R2 in its turn forwards the RSVP-message towards router R5 
which will handle the message in the same way as before described, and which 
will forward the RSVP-message towards the edge router ER. The routing tables of 
both previously mentioned routers R2 and R5 will be updated in the same way as 
5 described before. The message reception means MRM1 of edge router ER 

receives the RSVP-message together with the assigned global IP-address which 
was incorporated in the RSVP message. The message interpretation means MIM1 
of edge router ER interprets the global IP-address address by linking the global 
IP-address of the destination host DH with the interface of router Rl where the 

10 message came from and the routing-table updating means RUM! of edge router 
ER then updates its routing-table by adding a new entry containing the global IP- 
address and the interface of edge router ER where the RSVP message came from. 

In this way a data-packet from contacting host CH, arriving at the 
edge router ER and having destination host DH as destination, this data-packet 

15 containing consequently the global IP-address of destination host DH will be 
routed along the path of routers R5, R2 and Rl towards destination host DH 
using global IP-address and based on information as kept in the routing tables of 
the respective routers. 

It is also to be remarked that there is another way of implementing this 

20 solution. The destination host DH will send a request to establish a path towards 
the edge router ER . The edge router in its turn will receive the request, update the 
routing-table with a new entry containing the global IP-address together with the 
interface the message is coming from and subsequently send a path 
establishment request in the direction of the destination host DH along all routers 

25 situated on the shortest path. The message reception means MRM of each router 
Rl - R6 receives the path establishment request message together with the 
assigned global IP-address which was incorporated in the RSVP message. The 
message interpretation means MIM of each router Rl -R6 interprets the global 
IP-address address by linking the global IP-address of the destination host DH 

30 with the interface where the message is going to and the routing-table updating 
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means RUM then updates its routing-table by adding a new entry containing the 
global IP-address and the interface of the router where the message is going to. 

There is a third embodiment that makes use of a multicasting protocol 
Internet Group Management Protocol, further referred to as IGMP, running within 
5 the same network environment as before described and presented in FIG.l, is 
described in the following paragraphs. At first, the relevant elements of 
destination host DH, router Rl and the edge router ER from FIG. 1 as presented 
in FIG. 4A, 4B and 4C are described. Subsequently the connections between the 
relevant elements are described and in a later paragraph the actual execution of 

10 this embodiment of the present invention is described. 

The relevant means of the destination host DH as presented in FIG. 
4A are the assignment detection means ADM3 which is adapted to detect if a 
global IP-address has been assigned and if the destination host DH has been 
configured for internet connectivity, the multicast subscription means MCSM 

1 5 adapted to notify an adjacent router Rl -R6 of the private internet network PNW 
on the shortest path towards the edge router ER about the presence of a 
subscribing destination host DH using the IGMP multicast protocol and the global 
IP-address of destination host DH. Further there is a packet sending and 
reception means PSRM2, which is adapted to either send internet packets or 

20 receive internet packets. 

The assignment detection means ADM3 is coupled to the multicasting 
subscription means MCSM having an output-terminal being at the same time an 
Input/output terminal 1/02 of destination host DH. The packet sending and 
reception means PSRM2 has an Input/output-terminal that is coupled to 

25 Input/output-terminal 1/02 of destination host DH. 

The relevant means of router Rl in this embodiment as presented in 
FIG. 4B are the message reception means MRM2, which is adapted to receive a 
multicast message containing the global IP address of the destination host 
DH, a multicast group updating means MGUM which is adapted to interpret the 

30 multicast message containing the global IP address of the destination host DH 
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and to update a multicast group in order to establish a link of the branch of 
a multicast tree. At last there is a message forwarding means MFM2 which is 
able to forward a multicast message containing the global IP-address of said 
destination host DH towards an adjacent router or edge router ER on the 
5 shortest path between destination host DH and edge router ER. 

Router Rl comprises an input-terminal 12 that is also an input-terminal 
of message reception means MRM2. Message reception means MRM2 is coupled 
to the multicast group updating means MGUM that in its turn is coupled to 
message forwarding means MFM2. Message forwarding means MFM2 

10 comprises an output-terminal that is also an output-terminal Ol of router Rl . 
Routers R2 - R6 of FIG. 1 have in this embodiment the same structure as 
router Rl, as described before. 

The third relevant element of this embodiment is the edge router ER as 
presented in FIG. 4C which includes the following means: a message reception 

15 means MRM3 which is able to receive a multicast message containing the 
global IP-address of destination host DH and a multicast group updating 
means MGUM1 , which is adapted to interpret the multicast message containing 
the global IP-address of destination host DH and to update a multicast 
group based on said global IP-address in order to establish a link of the 

20 branch of a multicast tree. 

Edge router ER comprises an input-terminal 13 that is also an input- 
terminal of message reception means MRM2. Message reception means MRM2 is 
coupled to the multicast group updating means MGUM1 . 

In order to explain the operation of the present invention it is again 

25 assumed that a contacting host connected to the internet INW tries to contact the 
destination host. It is also assumed that this contacting host already has gained 
internet connectivity. Further it is assumed that there is a mechanism within the 
private network PNW, which is well known by any person skilled in the art, for 
assigning a global IP address to the destination host DH, from a pool of global 

30 IP-addresses allocated to the private internet network PNW. 
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At the time the assignment detection means ADM3 detects that the 
global IP address has been assigned to the destination host DH the multicasting 
subscription means MCSM sends an IGMP join-message with the assigned global 
IP-address incorporated in the join-message towards adjacent router Rl, that is 
5 at the same time the designated router, in order to indicate that the destination 
host wants to subscribe to the multicast tree whereof the edge router ER is the 
administration or the root of the tree. Besides it is determined using Protocol 
Independent Multicast that the shortest path between destination host DH and 
edge router ER for the in this embodiment described network configuration leads 

10 via routers Rl, R2 and R5. 

The message reception means MRM2 of the designated router, router 
Rl receives the IGMP join message together with the assigned global IP-address 
which is incorporated in the join message. Subsequently the multicasting group 
updating means MGUM will interpret the message and update the multicasting 

15 group by adding the IP-link where the join-message came from to the multicast 
group together with the assigned global IP-address as the multicast address. 
Then message forwarding means MFM2 forwards the join-message containing 
the global IP-address of destination host DH towards the router R2. Router R2 
handles the join-message in the same way as router Rl and in the end forwards 

20 the join message to router R5 that, again, will handle the join message in the 
same way as router Rl . This results in an updated multicast group information. 
The join message at last is forwarded to edge router ER. The message reception 
means MRM3 receives the IGMP-join-message together with the assigned global 
IP-address. Subsequently the multicasting group updating means MGUM1 will 

25 interpret the message and update the multicasting group by adding the IP-link 
where the join-message came from to the multicast group with the assigned 
global IP-address of destination host DH as the multicast-address. 

In this way a data-packet from contacting host CH, arriving at the 
edge router ER and having destination host DH as destination, this data-packet 

30 containing consequently the global IP-address of destination host DH will be 
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selected by the edge router ER as a multicast packet based on the assigned 
global IP-address of destination host DH and subsequently treated as a multicast 
packet by consulting the multicast group information, as kept in the 
corresponding tables of the respective routers, in order to routed the internet 
5 packets along the path of routers R5, R2 and Rl towards destination host DH. 

Although the above embodiment of the invention has been described 
by means of functional blocks, their detailed realisation based on this functional 
description should be obvious for a person skilled in the art and is therefore not 
described. 

10 While the principles of the invention have been described above in 

connection with specific apparatus, it is to be clearly understood that this 
description is made only by way of example and not as a limitation on the scope 
of the invention, as defined in the appended claims. 



